Incident review and recovery plan
Review symptoms, hosting alerts, and available backups to agree a containment and recovery plan.
Websites & WordPress
Investigate signs of compromise, remove identified malicious changes, and help recover an affected website.
01 / THE STARTING POINT
Spam pages, unfamiliar admin accounts, unexpected redirects, or a hosting suspension can have different causes. We gather the timing and symptoms and check what files, logs, or backups are available before changing the live site.
The recovery plan may involve cleaning the affected installation or restoring from a suitable backup. We verify agreed pages and functions after recovery and document what was found, which actions remain, and where additional investigation may be needed.
02 / WHAT WE COVER
The recovery scope depends on hosting access, the affected systems, and backup quality. Investigations beyond the website are scoped separately.
Review symptoms, hosting alerts, and available backups to agree a containment and recovery plan.
Remove identified malicious changes or restore a usable clean version, then address the entry point where it can be confirmed.
Verify agreed site functions and hand over findings, changes, and follow-up actions for the owner.
03 / DIFFERENT STARTING POINTS
A focused project or part of a wider plan. We shape the scope around your current situation and the work that matters next.
Review where the redirect is introduced and check affected pages and devices after the agreed recovery work.
Let’s discuss itUse the host’s findings and available backups to plan recovery, then help prepare the information the host needs for review.
Let’s discuss it04 / HOW THE WORK MOVES FORWARD
Share the affected URL, when the issue began, hosting alerts, and what backups exist. Arrange access through a secure channel.
Look at the examples and existing setup to confirm what the work needs to solve.
Confirm the deliverables, access requirements, review points, and what a successful result looks like.
Complete the agreed work and review the results against the examples or checks defined at the start.
Share the agreed files, findings, or changes and explain any next steps your team owns.
05 / YOUR QUESTIONS, ANSWERED
Have a requirement we haven’t covered?
Let’s talk about it
That depends on the scope of the compromise and what can be reconstructed. We review available files, data, and access before confirming options.
A backup can help restore service. We assess its date and condition and look for the entry point so a restore does not simply reintroduce the same risk.
We can help prepare the site and evidence for a review after cleanup. The browser, search provider, or host controls the warning and review timeline.
We prepare a proposal around the agreed deliverables, complexity, dependencies, access, and review requirements. Third-party charges and ongoing work are identified separately.
Tell us about your business, the requirement, and what you already have in place. We will discuss the fit, clarify the scope, and recommend a practical next step.
LET’S TALK ABOUT YOUR PROJECT
Tell us about your business and what you want to improve. We’ll help you define a practical starting point.
Website design & development.
A focused project or
a connected plan.